CancelDll
LoadDll
Behavioral task
behavioral1
Sample
e0e373616a84516d3cf6d8b9504b374e_JaffaCakes118.dll
Resource
win7-20240903-en
Target
e0e373616a84516d3cf6d8b9504b374e_JaffaCakes118
Size
75KB
MD5
e0e373616a84516d3cf6d8b9504b374e
SHA1
42b05792d8bca6a16bf4810b0057e9b010b14d1a
SHA256
47474882fdcbd48c6f3839b4ecf37b9f9d2b64d20571d326303b35fc2678a8f3
SHA512
1f6fb8723bc3a80f60355ed5c3bcb733515afe34abebe89240738ca6dcd6654c420928c25de735ed0f5a746808d4878619892bbcf45c2f7337024dab305b54ff
SSDEEP
1536:SAVJ0mWeB/iU94t1qMgJW+TnQwdVzikPWRXK:zJ0mW8/iNHTgIORdViwWM
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e0e373616a84516d3cf6d8b9504b374e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE